$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3131372e3132362e302e302f31362d3234203d3e20313436383338.roa File: 3131372e3132362e302e302f31362d3234203d3e20313436383338.roa (raw, json) Hash identifier: 7O6lVFjPYp+/PuTsL/Z/G8YuTrvuJz1b8wEzBHmhpGw= Subject key identifier: 64:BC:21:75:1C:19:22:76:35:35:42:ED:BF:85:71:CD:87:67:DF:95 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 3E653CE93E8B414DCD33BFC199F5F09C02C68C02 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3131372e3132362e302e302f31362d3234203d3e20313436383338.roa Signing time: Wed 27 May 2026 07:34:52 +0000 ROA not before: Wed 27 May 2026 07:29:52 +0000 ROA not after: Wed 26 May 2027 07:34:52 +0000 asID: 146838 IP address blocks: 117.126.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:65:3c:e9:3e:8b:41:4d:cd:33:bf:c1:99:f5:f0:9c:02:c6:8c:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: May 27 07:29:52 2026 GMT Not After : May 26 07:34:52 2027 GMT Subject: CN=64BC21751C192276353542EDBF8571CD8767DF95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:37:d9:f7:e7:6a:51:8c:83:e7:91:33:01:ba: 7f:aa:12:9f:ad:b6:ee:06:29:29:02:d7:d8:da:64: 77:9f:d7:d4:88:26:dd:59:8a:2f:b8:95:25:bf:82: 77:2f:de:9b:65:81:8f:27:31:80:81:a0:14:e7:28: 21:43:20:8d:b8:d5:5b:16:8b:5e:80:58:1f:d8:f8: e8:b4:62:02:3b:d0:5a:60:c7:f1:5d:64:aa:b3:81: 08:b7:89:96:c2:09:73:20:0c:43:d8:14:c1:4b:7e: cf:8f:36:14:5d:1e:d4:25:df:f1:b2:d6:8e:57:d2: f7:2c:6d:37:2b:4b:84:f6:76:6b:30:e8:a9:20:2c: 8b:c4:aa:ff:51:f2:02:89:f7:11:f7:ab:7b:a1:f5: 46:29:e6:8f:60:df:80:3a:84:d3:1d:5b:a2:fd:bc: f0:f0:a0:2f:42:61:44:24:ee:49:21:7c:94:19:d1: 3a:d9:eb:d1:8e:4b:7d:6c:79:af:40:4f:4b:b5:a9: 12:44:4f:15:e4:c3:84:54:39:f6:ce:06:69:5a:59: 3f:f7:26:08:cc:7f:e4:fa:af:4c:10:0e:a2:72:06: 17:3f:79:36:e1:f4:bb:88:ba:f1:c6:fd:ac:09:e8: b0:8f:9c:08:ed:9a:f8:11:4c:d5:52:84:2b:0d:3c: 42:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:BC:21:75:1C:19:22:76:35:35:42:ED:BF:85:71:CD:87:67:DF:95 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3131372e3132362e302e302f31362d3234203d3e20313436383338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.126.0.0/16 Signature Algorithm: sha256WithRSAEncryption 26:da:28:e5:f6:0e:80:1d:39:38:a6:99:e8:7d:c2:9d:ef:1f: 1d:47:9a:e0:06:a0:be:c5:87:33:d4:3a:5b:dc:2a:4c:9a:17: dc:be:58:2d:ef:89:32:5e:ca:66:ad:3a:fd:0a:fa:91:62:41: b6:33:30:b9:97:be:eb:a2:17:74:a9:c9:dc:00:43:dc:8e:f0: 4b:f5:05:f5:97:d3:4a:fd:a6:11:f4:18:d9:bd:bf:78:90:2b: ea:af:ed:54:46:12:e8:53:0f:73:1c:0c:67:a1:02:a7:96:8c: 98:52:df:08:67:6f:d6:d1:24:db:3d:36:95:be:bf:68:5c:a3: 17:83:e8:e3:83:23:52:85:7d:84:7d:ca:ac:56:c7:d3:5a:db: 5d:61:a3:db:ee:c8:a0:75:17:90:89:12:2c:15:d6:34:c8:77: 84:1d:4d:0d:f1:31:ee:f9:10:8b:82:34:09:99:82:6d:bb:a6: 5c:ee:5f:20:af:66:a1:00:46:7a:7a:6e:7c:2e:8b:8b:5a:3d: e9:81:99:57:c1:ca:3c:0c:c2:59:49:28:df:ff:98:26:8b:aa: 64:bc:e6:53:e6:c2:a3:22:23:4f:f9:76:12:b1:cd:0d:9a:03: 7b:00:c5:ee:53:cb:9d:68:0e:4b:7a:ca:9f:e5:f5:21:35:93: 48:63:14:83 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIUPmU86T6LQU3NM7/BmfXwnALGjAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjA1MjcwNzI5NTJaFw0yNzA1MjYwNzM0NTJaMDMxMTAvBgNV BAMTKDY0QkMyMTc1MUMxOTIyNzYzNTM1NDJFREJGODU3MUNEODc2N0RGOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwN9n352pRjIPnkTMBun+qEp+t tu4GKSkC19jaZHef19SIJt1Zii+4lSW/gncv3ptlgY8nMYCBoBTnKCFDII241VsW i16AWB/Y+Oi0YgI70Fpgx/FdZKqzgQi3iZbCCXMgDEPYFMFLfs+PNhRdHtQl3/Gy 1o5X0vcsbTcrS4T2dmsw6KkgLIvEqv9R8gKJ9xH3q3uh9UYp5o9g34A6hNMdW6L9 vPDwoC9CYUQk7kkhfJQZ0TrZ69GOS31sea9AT0u1qRJETxXkw4RUOfbOBmlaWT/3 JgjMf+T6r0wQDqJyBhc/eTbh9LuIuvHG/awJ6LCPnAjtmvgRTNVShCsNPEJtAgMB AAGjggITMIICDzAdBgNVHQ4EFgQUZLwhdRwZInY1NULtv4VxzYdn35UwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjc4NjU2MS8wLzMxMzEzNzJlMzEz MjM2MmUzMDJlMzAyZjMxMzYyZDMyMzQyMDNkM2UyMDMxMzQzNjM4MzMzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQC AAEwBQMDAHV+MA0GCSqGSIb3DQEBCwUAA4IBAQAm2ijl9g6AHTk4ppnofcKd7x8d R5rgBqC+xYcz1Dpb3CpMmhfcvlgt74kyXspmrTr9CvqRYkG2MzC5l77rohd0qcnc AEPcjvBL9QX1l9NK/aYR9BjZvb94kCvqr+1URhLoUw9zHAxnoQKnloyYUt8IZ2/W 0STbPTaVvr9oXKMXg+jjgyNShX2EfcqsVsfTWttdYaPb7sigdReQiRIsFdY0yHeE HU0N8THu+RCLgjQJmYJtu6Zc7l8gr2ahAEZ6em58LouLWj3pgZlXwco8DMJZSSjf /5gmi6pkvOZT5sKjIiNP+XYSsc0NmgN7AMXuU8udaA5Lesqf5fUhNZNIYxSD -----END CERTIFICATE-----Generated at Sat May 30 00:02:23 2026 by rpki-client